This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft File: JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft (raw, json) Hash identifier: rmJyh3H7NhCdl+5JxTLqbSfmFvoNEA7MUBJnNXeTjuk= Subject key identifier: 0F:A0:28:BB:C9:C4:3B:F8:5F:60:A7:5B:4B:9A:E1:08:9E:D1:3A:BE Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9 Certificate issuer: /CN=255633182ddd558b41ba16c519ee461450ddddd9 Certificate serial: 019AF19BA6C1C5FC4EFD84F9F04C39AB1DC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft Manifest number: 018C Signing time: Sat 06 Dec 2025 03:01:41 +0000 Manifest this update: Sat 06 Dec 2025 03:01:41 +0000 Manifest next update: Sun 07 Dec 2025 03:01:41 +0000 Files and hashes: 1: JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl (hash: 3XUJGk1JdAethk1Zo7IYBoGd4derP2hT/9BWwLhqCx8=) 2: rsJr37lWx4RTfR8Cvpu056B6Wz4.roa (hash: /l5appIPEWouSbZYMspTa7m6sRTfOtnp/hleC+S0sOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a6:c1:c5:fc:4e:fd:84:f9:f0:4c:39:ab:1d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9 Validity Not Before: Dec 6 03:01:41 2025 GMT Not After : Dec 7 03:01:41 2025 GMT Subject: CN=0fa028bbc9c43bf85f60a75b4b9ae1089ed13abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a6:bc:f9:0d:43:92:de:5b:7f:ec:c7:5f:99: cf:7f:ba:08:7b:dd:b3:8a:a2:b9:4b:82:80:29:f3: 14:f1:ec:ae:bd:87:7e:29:a1:ac:56:44:86:ba:65: e0:6d:fb:47:03:9f:26:40:7a:81:70:26:c6:44:0b: d5:b7:2a:01:db:1c:93:1b:15:37:bd:7c:b1:6e:91: 8a:af:29:5a:6b:da:a4:39:d2:69:aa:9a:da:f2:8d: 4a:0a:d0:09:91:41:4b:11:fc:8c:d1:05:a5:8c:12: 57:8b:2b:90:64:63:4f:fb:93:63:69:0e:e8:00:73: cd:ee:54:b6:3d:92:cf:30:66:35:f2:4c:39:f6:20: 01:34:23:57:f4:db:11:2f:06:ff:ef:c6:8f:67:a7: 8f:95:05:fb:92:d6:b1:f5:75:1b:17:19:9a:e4:e6: ea:48:34:8d:93:01:fc:cd:54:6f:b0:f3:8f:56:58: 62:f4:9f:90:2a:ce:e3:5a:01:4e:8d:1c:d6:09:c7: 12:a8:c5:27:db:50:b4:f7:28:0e:1a:cf:cb:b4:03: 7b:55:a0:02:fd:f8:fe:2e:00:c3:b4:29:7b:8d:ed: 3f:c5:ab:d2:16:94:77:c5:f1:24:79:91:05:41:65: 5b:60:2d:25:2f:69:25:65:5c:80:22:c2:d1:9b:a7: af:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A0:28:BB:C9:C4:3B:F8:5F:60:A7:5B:4B:9A:E1:08:9E:D1:3A:BE X509v3 Authority Key Identifier: keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cd:4b:9a:66:53:63:10:84:ef:3f:3f:d3:c0:fa:f9:7c:8a: 68:d0:19:24:db:8b:9c:f9:45:23:5e:97:0c:cd:e7:db:29:18: 8f:dd:c1:54:91:8e:3d:70:5f:ca:25:07:8b:36:6e:c3:88:47: 56:77:26:97:58:ad:23:f2:3f:9a:9e:5f:ed:96:eb:c9:57:ab: 97:79:8d:c5:f4:a4:65:bf:14:93:2d:a7:5a:57:7b:55:33:62: 0f:75:44:6f:2a:07:2e:d3:12:f7:80:16:49:8f:00:1e:29:40: 79:7c:d4:26:5b:64:d8:62:d8:21:6c:53:fb:9b:38:33:17:a7: 7d:03:bc:f4:c9:81:51:78:07:b0:14:2e:40:0f:bf:72:fd:42: 6a:01:26:7d:21:9c:88:2e:86:d1:68:18:80:f4:7a:cc:b7:4e: 8a:cf:a5:f3:3c:92:7a:9f:8c:af:a8:14:33:fc:fb:4a:00:5e: ea:b9:f9:b7:11:20:59:38:dc:54:47:93:04:50:38:d7:98:3d: fe:a6:c1:40:f2:1a:74:5d:b5:74:c2:08:2b:12:ea:5d:b7:6f: 51:c4:b7:78:40:d1:5b:1b:9a:fc:9c:b0:64:fd:2a:d8:ea:39: f2:c8:28:f8:ca:32:ec:05:c6:c4:93:2e:e0:18:a7:8f:fb:f0: 19:5e:ba:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6bBxfxO/YT58Ew5qx3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTYzMzE4MmRkZDU1OGI0MWJhMTZjNTE5ZWU0NjE0NTBk ZGRkZDkwHhcNMjUxMjA2MDMwMTQxWhcNMjUxMjA3MDMwMTQxWjAzMTEwLwYDVQQD EygwZmEwMjhiYmM5YzQzYmY4NWY2MGE3NWI0YjlhZTEwODllZDEzYWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKa8+Q1Dkt5bf+zHX5nPf7oIe92z iqK5S4KAKfMU8eyuvYd+KaGsVkSGumXgbftHA58mQHqBcCbGRAvVtyoB2xyTGxU3 vXyxbpGKrylaa9qkOdJpqpra8o1KCtAJkUFLEfyM0QWljBJXiyuQZGNP+5NjaQ7o AHPN7lS2PZLPMGY18kw59iABNCNX9NsRLwb/78aPZ6ePlQX7ktax9XUbFxma5Obq SDSNkwH8zVRvsPOPVlhi9J+QKs7jWgFOjRzWCccSqMUn21C09ygOGs/LtAN7VaAC /fj+LgDDtCl7je0/xavSFpR3xfEkeZEFQWVbYC0lL2klZVyAIsLRm6evrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+gKLvJxDv4X2CnW0ua4Qie0Tq+MB8GA1UdIwQY MBaAFCVWMxgt3VWLQboWxRnuRhRQ3d3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZmViMWEtMjliNS00NGE2LTkyZWEt NWI1NDFmMzQ3MzJlLzEvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lZmViMWEtMjliNS00NGE2LTkyZWEtNWI1NDFmMzQ3MzJl LzEvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHs1LmmZT YxCE7z8/08D6+XyKaNAZJNuLnPlFI16XDM3n2ykYj93BVJGOPXBfyiUHizZuw4hH Vncml1itI/I/mp5f7ZbryVerl3mNxfSkZb8Uky2nWld7VTNiD3VEbyoHLtMS94AW SY8AHilAeXzUJltk2GLYIWxT+5s4MxenfQO89MmBUXgHsBQuQA+/cv1CagEmfSGc iC6G0WgYgPR6zLdOis+l8zySep+Mr6gUM/z7SgBe6rn5txEgWTjcVEeTBFA415g9 /qbBQPIadF21dMIIKxLqXbdvUcS3eEDRWxua/JywZP0q2Oo58sgo+Moy7AXGxJMu 4Binj/vwGV66Fg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:10 2025 by rpki-client